T1557.002 - ARP Cache Poisoning is a mitre_attack tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
T1557.002 - ARP Cache Poisoning is a mitre_attack tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed August 2, 2026; most recent activity August 2, 2026.
A significant firmware vulnerability in Coldcard hardware wallets allowed attackers to exploit weak seed generation, resulting in the theft of approximately 1,367 BTC (around $70 million) from nearly 1,200 wallets. The…
T1557.002 - ARP Cache Poisoning is a mitre_attack tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
The most recent intelligence report mentioning T1557.002 - ARP Cache Poisoning on ThreatCluster is dated August 2, 2026.
Across ThreatCluster reporting, T1557.002 - ARP Cache Poisoning most frequently co-occurs with Malware, Phishing, Supply Chain Attack, CWE-200 - Exposure of Sensitive Information, CWE-94 - Code Injection, among 12 tracked related entities.
The most significant recent cluster is “Coldcard Firmware Flaw Leads to $70M Bitcoin Theft” (18 articles · Updated August 2, 2026). T1557.002 - ARP Cache Poisoning appears across 1 threat cluster in total, listed above with sources.
T1557.002 - ARP Cache Poisoning appears in 1 intelligence report mention across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.